Debian: DSA-2133-1: New collectd packages fix denial of service

    Date13 Dec 2010
    CategoryDebian
    53
    Posted ByLinuxSecurity Advisories
    It was discovered that collectd, a statistics collection and monitoring daemon, is prone to a denial of service attach via a crafted network packet.
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1
    
    - ------------------------------------------------------------------------
    Debian Security Advisory DSA-2133-1                  This email address is being protected from spambots. You need JavaScript enabled to view it.
    http://www.debian.org/security/                         Raphael Geissert
    December 13, 2010                     http://www.debian.org/security/faq
    - ------------------------------------------------------------------------
    
    Package        : collectd
    Vulnerability  : denial of service
    Problem type   : remote
    Debian-specific: no
    CVE Id         : CVE-2010-4336
    Debian Bug     : 605092
    
    
    It was discovered that collectd, a statistics collection and monitoring
    daemon, is prone to a denial of service attach via a crafted network
    packet.
    
    
    For the stable distribution (lenny), this problem has been fixed in
    version 4.4.2-3+lenny1.
    
    For the testing distribution (squeeze), this problem has been fixed in
    version 4.10.1-1+squeeze2.
    
    For the unstable distribution (sid), this problem has been fixed in
    version 4.10.1-2.1.
    
    
    This advisory only contains the packages for the alpha, amd64, arm,
    armel, hppa, i386, ia64, mips, powerpc, s390 and sparc architectures.
    The packages for the mipsel architecture will be released soon.
    
    We recommend that you upgrade your collectd packages.
    
    Upgrade instructions
    - --------------------
    
    wget url
            will fetch the file for you
    dpkg -i file.deb
            will install the referenced file.
    
    If you are using the apt-get package manager, use the line for
    sources.list as given below:
    
    apt-get update
            will update the internal database
    apt-get upgrade
            will install corrected packages
    
    You may use an automated update by adding the resources from the
    footer to the proper configuration.
    
    Debian GNU/Linux 5.0 alias lenny (stable)
    - ------------------------------------------
    
    Stable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, powerpc, s390 and sparc.
    
    Source archives:
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1.dsc
        Size/MD5 checksum: 1742  7eb809863e35c70e5da831ef83e5935b
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2.orig.tar.gz
        Size/MD5 checksum: 1220408  dbffe35a2d19840e86253c7052485ff0
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1.diff.gz
        Size/MD5 checksum: 38096  6e0579c82d00a84da53d06eba261a157
    
    Architecture independent packages:
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dev_4.4.2-3+lenny1_all.deb
        Size/MD5 checksum: 58100  6ab2decfb0f6d4822bd399f83acde4bf
    
    alpha architecture (DEC Alpha)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_alpha.deb
        Size/MD5 checksum: 476094  3ba6081a7bda823e51deb57e670681a6
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_alpha.deb
        Size/MD5 checksum: 465310  512bcae97e48588f6f8e3c06b71b4a05
    
    amd64 architecture (AMD x86_64 (AMD64))
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_amd64.deb
        Size/MD5 checksum: 496366  90685a47da1745e9bbc8dba2979cfe64
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_amd64.deb
        Size/MD5 checksum: 443120  1ab233f04323751ced0078715dd82071
    
    arm architecture (ARM)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_arm.deb
        Size/MD5 checksum: 466518  399a912918db34f2986fb5338081b261
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_arm.deb
        Size/MD5 checksum: 425430  21cd791ba65567b6998188efe1b9d9c3
    
    armel architecture (ARM EABI)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_armel.deb
        Size/MD5 checksum: 469682  8054cff25dc257476d2a533b6058ee93
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_armel.deb
        Size/MD5 checksum: 439244  f53bd8054c6c27b08e39b2aef5aaab61
    
    hppa architecture (HP PA RISC)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_hppa.deb
        Size/MD5 checksum: 462784  cf54ada8a3af6e42c06b0900dbeb90e7
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_hppa.deb
        Size/MD5 checksum: 465640  5d2b68b4a158e7ff513227dec30cdd16
    
    i386 architecture (Intel ia32)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_i386.deb
        Size/MD5 checksum: 464516  2a7655f9aa1b3a4c7621cf78bd374efc
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_i386.deb
        Size/MD5 checksum: 423402  a4d5e2884269a67f3e97751dd71c27fd
    
    ia64 architecture (Intel ia64)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_ia64.deb
        Size/MD5 checksum: 480124  44fcf702d45fcf3eabb96d61472dcb55
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_ia64.deb
        Size/MD5 checksum: 546484  5775d3d87c1f2f565e4b638d935bea7c
    
    mips architecture (MIPS (Big Endian))
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_mips.deb
        Size/MD5 checksum: 480898  0809b6c3bdb6571ce7a8f2e4a3d26522
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_mips.deb
        Size/MD5 checksum: 432446  0d96311abc84ea9d52633410cf9bc9ac
    
    powerpc architecture (PowerPC)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_powerpc.deb
        Size/MD5 checksum: 530484  c566c5caa95ebf68637cbf22ebb09d55
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_powerpc.deb
        Size/MD5 checksum: 528826  9465884478ae3b9d01e917c6a83c4f11
    
    s390 architecture (IBM S/390)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_s390.deb
        Size/MD5 checksum: 467426  19128d66e83d38e13dc393741218a7b2
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_s390.deb
        Size/MD5 checksum: 446950  01f36f15ede792ce1c6840b8e058ef9d
    
    sparc architecture (Sun SPARC/UltraSPARC)
    
      http://security.debian.org/pool/updates/main/c/collectd/collectd-dbg_4.4.2-3+lenny1_sparc.deb
        Size/MD5 checksum: 433938  5e577a4403d2318faac96709179bf47e
      http://security.debian.org/pool/updates/main/c/collectd/collectd_4.4.2-3+lenny1_sparc.deb
        Size/MD5 checksum: 428472  7661dd06cf7c90130dd706cf21bacf3d
    
    
      These files will probably be moved into the stable distribution on
      its next update.
    
    - ---------------------------------------------------------------------------------
    For apt-get: deb http://security.debian.org/ stable/updates main
    For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
    Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it.
    Package info: `apt-cache show ' and http://packages.debian.org/
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"40","type":"x","order":"1","pct":48.78,"resources":[]},{"id":"88","title":"Should be more technical","votes":"13","type":"x","order":"2","pct":15.85,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"29","type":"x","order":"3","pct":35.37,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.